Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32332e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e32332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          60CY8dnn+QKttzj+wQBqUSFoZrVKpM2AR/9jB9cmMz8=
Subject key identifier:   F5:7E:EC:7E:CA:2F:1E:CE:5B:B4:4E:09:E4:31:34:89:97:A4:F1:1C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7CD2E064240ADB4862718F87266DD790C9725487
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32332e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:02 +0000
ROA not before:           Wed 16 Nov 2022 11:24:02 +0000
ROA not after:            Wed 15 Nov 2023 11:29:02 +0000
asID:                     49999
IP address blocks:        74.50.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d2:e0:64:24:0a:db:48:62:71:8f:87:26:6d:d7:90:c9:72:54:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:02 2022 GMT
            Not After : Nov 15 11:29:02 2023 GMT
        Subject: CN=F57EEC7ECA2F1ECE5BB44E09E431348997A4F11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:e6:38:d5:43:a9:e7:fa:55:78:1e:d7:e6:
                    6e:79:36:3f:09:6e:f9:9a:43:8c:1e:02:07:06:2b:
                    1c:2e:19:57:ba:ac:a3:73:d1:14:33:39:05:5f:be:
                    4a:f5:26:b8:a0:ab:b0:b0:aa:ef:7e:42:68:1c:0b:
                    c0:93:eb:14:f3:3c:62:f3:fe:4f:36:bd:bc:ab:d7:
                    c8:61:62:ab:87:32:b3:db:ae:11:6b:d2:76:51:14:
                    4c:3e:38:a4:76:61:98:35:e4:6f:cd:bb:8f:1b:69:
                    53:f6:b8:fb:72:30:ac:57:04:32:c8:d0:06:44:9a:
                    b3:8b:a3:5a:0a:9c:32:52:d8:f0:2c:a5:d0:d3:e8:
                    e8:b4:0a:09:d1:15:37:1f:9f:a0:9d:52:ff:96:b6:
                    bd:58:4b:61:ff:c6:20:38:e3:a9:90:79:e1:a0:99:
                    e9:59:c2:ab:21:54:03:54:2d:fa:4f:09:04:07:37:
                    40:b1:79:35:87:96:f4:4c:aa:66:fc:de:79:2d:bc:
                    83:b6:38:70:79:9d:71:c1:e1:3d:77:2c:3b:f0:56:
                    e1:0b:08:7d:30:cd:ad:1f:45:ce:e4:e6:f0:23:b6:
                    4c:fe:61:39:be:ea:a5:ed:99:b8:6b:fc:df:a2:f9:
                    6a:b7:b7:98:2a:d7:ea:11:85:7d:61:2f:a1:c5:b9:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:EC:7E:CA:2F:1E:CE:5B:B4:4E:09:E4:31:34:89:97:A4:F1:1C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:98:3d:17:da:3a:2a:86:55:18:b8:0f:42:49:ee:e0:63:8b:
         46:ea:14:e6:ce:64:ba:19:71:6c:11:20:c6:87:60:4b:3e:4a:
         7a:9c:07:fb:e8:ff:d1:4a:85:be:99:9a:96:d6:e5:a8:ef:04:
         2e:f3:c4:f5:69:04:9f:11:e4:a2:1e:fa:ce:16:ff:6c:cf:eb:
         2b:bd:04:b2:7a:e9:0e:fb:7e:f2:77:b7:93:b4:d9:83:01:9e:
         60:a7:0e:7c:31:35:56:92:85:80:49:46:e1:b8:4d:24:97:23:
         bd:2e:ce:e5:5d:1a:44:7d:2d:dd:08:6d:47:d4:e3:d9:8b:90:
         a5:44:38:76:b0:f8:ec:c5:86:ae:cb:94:b4:b2:0c:56:f3:db:
         25:8d:4e:25:2d:89:25:b1:21:13:b1:f9:ee:7e:ec:51:69:c7:
         4a:f4:e4:0c:22:7e:5b:ea:2d:81:85:88:e7:c1:5c:16:79:14:
         fc:bc:a8:76:86:ac:91:0d:d2:fc:5f:5f:8c:99:4c:61:6c:92:
         9b:7e:03:f4:45:f2:9d:73:78:2b:43:f9:07:fa:1c:0c:4f:35:
         d3:6b:36:ab:78:be:09:59:5f:98:e2:62:14:f7:90:83:87:3e:
         75:a7:55:c4:c5:a9:89:17:da:07:80:fd:08:3f:ae:c3:84:4a:
         8d:94:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----